1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-discuss] beta2 woes and no graphical root (tonyb)
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20beta2%20woes%20and%20no%20graphical%20root%20%28tonyb%29&In-Reply-To=%3CCA%2Bh4nj6w%3DXXcw5ksC03%3D_faa2peXCp2JPSFKtLjqB6eeqKCkig%40mail.gmail.com%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="006942.html">
<LINK REL="Next" HREF="006944.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-discuss] beta2 woes and no graphical root (tonyb)</H1>
<B>Wolfgang Bornath</B>
<A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20beta2%20woes%20and%20no%20graphical%20root%20%28tonyb%29&In-Reply-To=%3CCA%2Bh4nj6w%3DXXcw5ksC03%3D_faa2peXCp2JPSFKtLjqB6eeqKCkig%40mail.gmail.com%3E"
TITLE="[Mageia-discuss] beta2 woes and no graphical root (tonyb)">molch.b at googlemail.com
</A><BR>
<I>Tue Apr 10 15:17:20 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="006942.html">[Mageia-discuss] beta2 woes and no graphical root (tonyb)
</A></li>
<LI>Next message: <A HREF="006944.html">[Mageia-discuss] beta2 woes and no graphical root (tonyb)
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#6943">[ date ]</a>
<a href="thread.html#6943">[ thread ]</a>
<a href="subject.html#6943">[ subject ]</a>
<a href="author.html#6943">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>2012/4/10 Kevin R. Bulgrien <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-discuss">kbulgrien at att.net</A>>:
><i> On Sunday, April 08, 2012 06:46:37 am Morgan Leijström wrote:
</I>>><i> söndagen den 8 april 2012 12.54.04 skrev  Wolfgang Bornath:
</I>>><i> > maybe there is a reason to login to a gui as root - although in
</I>>><i> > all my 17 years of Linux I haven't heard one. And I have never heard
</I>>><i> > about any sysadmin who did it with a reason.
</I>>><i>
</I>>><i> Lazyness in my case. Or call it efficiency cause of scarce time.
</I>>><i> I want machines to work for me, do not have all hours to learn everything.
</I>>><i>
</I>>><i> I can not learn everything, even less remember it.
</I>>><i> A GUI session often have lots of useable tools to see what is going on, web
</I>>><i> browser to read documentation of what i am trying to do, can copy to
</I>>><i> virtual terminal, etc.
</I>>><i>
</I>>><i> That is why even my server always runs KDE (but not as root)
</I>>><i>
</I>>><i> Um... when i think about it i have not used GUI as root for a year or so,
</I>>><i> but it was a time saver in the beginning and i might have given up on
</I>>><i> Linux without it.
</I>>><i>
</I>>><i> This is the few sysadmin hours of an own smalll company owner and home
</I>>><i> server.
</I>><i>
</I>><i> A quick google of "run x as root" shows up good advice that has
</I>><i> existed for a very long time.  One example is:
</I>><i>
</I>><i> <A HREF="http://tldp.org/HOWTO/XWindow-User-HOWTO/xsecurity.html">http://tldp.org/HOWTO/XWindow-User-HOWTO/xsecurity.html</A>
</I>><i>
</I>><i> This kind of laziness is dangerous.  Even the discipline of not being on
</I>><i> the internet at the time is a false fix.  Anything that has security issues
</I>><i> can modify the security of the local network, install malware, or
</I>><i> damage critical files, etc.
</I>><i>
</I>><i> A shell in non-root X can easily attain root for GUI applications - not just
</I>><i> CLI instructions.
</I>><i>
</I>><i> Sure, it is less direct to look at the GUI menu to figure out how to invoke
</I>><i> some of the tools, but it can be a one-time effort that has a side effect of
</I>><i> increasing knowledge of the tools one uses to administer a system easily
</I>><i> and safely.
</I>><i>
</I>><i> I am not so much in a different position as you are, and I can probably
</I>><i> count on my hands how many times I ran X as root since Mandriva 7.2,
</I>><i> and I think that was too many.
</I>
Since my first Mandrake in 1998 (even before with SuSE and RedHat and
Debian I did it exactly 1 time - that was after the change to a red
background and it took only a couple of seconds and involved no action
except shutdown, I just wanted to see the red background :)
Well (not wasting too much time on this), everybody can do what he
wants - if he has the knowledge to change the configuration to be able
to login to KDE or Gnome as root, he should have the knowledge not to
do it. This hurdle which was implemented is a good idea to prevent
less experienced people doing it all the time just because of
laziness. So I'm not too happy about broadcasting how it works.
OTOH, we are not the security admins of the user's mind. :)
--
wobo
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="006942.html">[Mageia-discuss] beta2 woes and no graphical root (tonyb)
</A></li>
<LI>Next message: <A HREF="006944.html">[Mageia-discuss] beta2 woes and no graphical root (tonyb)
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#6943">[ date ]</a>
<a href="thread.html#6943">[ thread ]</a>
<a href="subject.html#6943">[ subject ]</a>
<a href="author.html#6943">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
mailing list</a><br>
</body></html>
|
